Almost every claim an IT provider makes about itself is written by the IT provider. Independent assessment is rarer, and it is worth more to the person who has to sign the contract.